admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-44015.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

796 B
Raw Permalink Blame History

CVE-2022-44015

Description

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xp_cmdshell extended procedure.

POC

Reference

Github

No PoCs found on GitHub currently.